cycode 3.22.1.dev9__py3-none-any.whl → 3.22.2.dev1__py3-none-any.whl

cycode/__init__.py

@@ -5,4 +5,4 @@ import time as _time
 # end-to-end scan duration from the moment the user actually triggered it.
 _BOOT_WALL: float = _time.time()
 
-__version__ = '3.22.1.dev9'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.22.2.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

cycode/cli/utils/host_info.py

@@ -4,17 +4,28 @@ import platform
 import re
 import socket
 import subprocess
+import sys
 import tempfile
 from pathlib import Path
-from typing import Optional
+from typing import Any, Optional
 
+from cycode.cli.consts import CYCODE_CONFIGURATION_DIRECTORY
 from cycode.logger import get_logger
 
 logger = get_logger('HOST INFO')
 
+pythoncom: Optional[Any] = None
+win32com_client: Optional[Any] = None
+if sys.platform == 'win32':
+    try:
+        import pythoncom
+        import win32com.client as win32com_client
+    except ImportError as e:
+        logger.debug('pywin32 is unavailable', exc_info=e)
+
 _SUBPROCESS_TIMEOUT_SEC = 5
 
-_SERIAL_NUMBER_CACHE_FILE_NAME = '.cycode-device-serial'
+_DEVICE_ID_CACHE_FILE_NAME = 'device-id'
 
 _PLATFORM_NAMES = {'Darwin': 'macOS', 'Windows': 'Windows', 'Linux': 'Linux'}
 
@@ -123,8 +134,7 @@ def _resolve_serial_number() -> Optional[str]:
 
 
 def _serial_number_cache_path() -> Path:
-    # The username suffix avoids collisions on OSes with a shared temp dir
-    return Path(tempfile.gettempdir()) / f'.cycode-device-serial-{getpass.getuser()}'
+    return Path.home() / CYCODE_CONFIGURATION_DIRECTORY / _DEVICE_ID_CACHE_FILE_NAME
 
 
 def _read_serial_number_cache() -> Optional[str]:
@@ -137,14 +147,13 @@ def _read_serial_number_cache() -> Optional[str]:
 def _write_serial_number_cache(serial: str) -> None:
     try:
         cache_path = _serial_number_cache_path()
+        cache_path.parent.mkdir(parents=True, exist_ok=True)
 
-        # The serial identifies the machine, and the temp dir is shared, so the cache is created
-        # readable by its owner alone (what mkstemp does) and moved into place atomically - a hook
-        # racing another one never reads a half-written cache, and the rename can't be redirected
-        # by a symlink planted at the destination the way an in-place write could.
-        file_descriptor, temp_path = tempfile.mkstemp(
-            dir=cache_path.parent, prefix=f'{_SERIAL_NUMBER_CACHE_FILE_NAME}.'
-        )
+        # The serial identifies the machine, so the cache is created readable by its owner alone
+        # (what mkstemp does) and moved into place atomically - a hook racing another one never
+        # reads a half-written cache, and the rename can't be redirected by a symlink planted at
+        # the destination the way an in-place write could.
+        file_descriptor, temp_path = tempfile.mkstemp(dir=cache_path.parent, prefix=f'{_DEVICE_ID_CACHE_FILE_NAME}.')
         try:
             with os.fdopen(file_descriptor, 'w', encoding='utf-8') as temp_file:
                 temp_file.write(serial)
@@ -165,15 +174,17 @@ def _get_macos_serial_number() -> Optional[str]:
 
 
 def _get_windows_serial_number() -> Optional[str]:
-    import pythoncom  # from pywin32
-    import win32com.client  # from pywin32
+    """Read the OEM serial over WMI."""
+    if pythoncom is None or win32com_client is None:
+        return None
 
     pythoncom.CoInitialize()
     try:
-        wmi_service = win32com.client.GetObject('winmgmts:')
+        wmi_service = win32com_client.GetObject('winmgmts:')
         for bios in wmi_service.InstancesOf('Win32_BIOS'):
             serial = bios.SerialNumber
-            return serial.strip() if serial else None
+            # whitespace-only is what whiteboxes and some hypervisors report
+            return serial.strip() or None if serial else None
     finally:
         pythoncom.CoUninitialize()
     return None

{cycode-3.22.1.dev9.dist-info → cycode-3.22.2.dev1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.22.1.dev9
+Version: 3.22.2.dev1
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE
@@ -31,6 +31,7 @@ Requires-Dist: patch-ng (==1.19.1)
 Requires-Dist: pathvalidate (>=3.3.1,<4.0.0)
 Requires-Dist: pydantic (>=2.11.5,<3.0.0)
 Requires-Dist: pyjwt (>=2.8.0,<3.0)
+Requires-Dist: pywin32 (>=312,<313) ; python_version >= "3.10" and sys_platform == "win32"
 Requires-Dist: pyyaml (>=6.0,<7.0)
 Requires-Dist: requests (>=2.32.4,<3.0)
 Requires-Dist: rich (>=15.0.0,<16.0.0)

{cycode-3.22.1.dev9.dist-info → cycode-3.22.2.dev1.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cycode/__init__.py,sha256=iAjqbqSdZ4uVb_yXz3TvQhIR1SZTNWO5X0HG8mjm9qg,396
+cycode/__init__.py,sha256=IbX4HQYnASwTZbZGmXccsZTYx86SWJuZrmMHgzWQShQ,396
 cycode/__main__.py,sha256=Z3bD5yrA7yPvAChcADQrqCaZd0ChGI1gdiwALwbWJ6U,104
 cycode/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/app.py,sha256=AlR2durAEbsa47PDfIj7JtMvJDWA_Dq6wPtVuMJYSCs,10250
@@ -178,7 +178,7 @@ cycode/cli/utils/binary_utils.py,sha256=PxP-rVJ1lEiOam-DQ1XU68oWtfwup4sCFHXv54cf
 cycode/cli/utils/enum_utils.py,sha256=h_VTCfJ-0hnhwDsEznmx56rJrCb5FQ8u6PrI6p8MP3E,187
 cycode/cli/utils/get_api_client.py,sha256=wwHabfVCDbFjcIwOn5Raho8MEPiOAgkHlGUEfXKpl8U,3542
 cycode/cli/utils/git_proxy.py,sha256=FPHMBiyLFK9X9vKYpKySRKJH6Dc9Cb3nO241Q95dASE,2911
-cycode/cli/utils/host_info.py,sha256=0YhSh2gCS7PoVK0pcBFZkjjczHX48j1n4Uck8JPGDR0,5868
+cycode/cli/utils/host_info.py,sha256=ba3scmnOJQOtNpVT-rf2-FKb0ocGzpPUONsG-uxmhro,6249
 cycode/cli/utils/ignore_utils.py,sha256=cODqhnOHA2kRo8rMY0YcmcKkmXNPOC9UTCmFu62RRqE,15567
 cycode/cli/utils/jwt_utils.py,sha256=EGI-0CKhCGY8hIcZ9b9diq9hqtOUf8Ha8ukeVJIf974,818
 cycode/cli/utils/path_utils.py,sha256=U5te1unzhs9pnU5d9BWExgFWElHQkgKvFxKiOF-lp-w,3245
@@ -215,8 +215,8 @@ cycode/cyclient/report_client.py,sha256=Scq30NeJPzgXv0hPLO1U05AdE9i_2iu6cIrSKpEJ
 cycode/cyclient/scan_client.py,sha256=DqAZ7u6Z_cvw9A9RlLkAQUgLRwPCCAsUq5U9umt4F7Y,16955
 cycode/cyclient/scan_config_base.py,sha256=mXsPZGYCtp85rv5GIige40yQZXuRcEKUW-VQJ0vgFzk,1201
 cycode/logger.py,sha256=EfZGRK6VC5rE_LAjIcRrHFiQCueylCDXoG6bvGkrIME,2111
-cycode-3.22.1.dev9.dist-info/METADATA,sha256=LXtTUVmEVKmVB8mYYx7Kkj3XoIIwnoHjbn-rbPOmxmw,93596
-cycode-3.22.1.dev9.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
-cycode-3.22.1.dev9.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
-cycode-3.22.1.dev9.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
-cycode-3.22.1.dev9.dist-info/RECORD,,
+cycode-3.22.2.dev1.dist-info/METADATA,sha256=s_JlmuVuOTttmb8LRd1cY_D5t6tMC_SR6qkpTe2HYhs,93687
+cycode-3.22.2.dev1.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
+cycode-3.22.2.dev1.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
+cycode-3.22.2.dev1.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
+cycode-3.22.2.dev1.dist-info/RECORD,,